GPRS architecture and GTP protocol

GPRS/UMTS Overview GTP Overview APNs GTP Details

GPRS and its Features GPRS Network Architecture Role of SGSN & GGSN GPRS Protocol Architecture Definition and functions of various protocol layers i.e. SNDCP, RLC-MAC, LLC, PHY GPRS Session Management PDP context establishment, accept, negotiation GPRS Mobility Management Network Attach\detach
Routing area update

Contents

GPRS Applications

GSM networks Constraints

Data Rates too slow about 9.6 kbps Connection setup time too long Inefficient resource utilization for bursty traffic Proves expensive for bursty traffic utilization No efficient method for packet transfers

GPRS offers significant performance improvement over GSM GSM GPRS

Data Rates Billing Access to HLR 9.6 Kbps Duration of connection every MT call causes query to HLR 14.4 to 115.2 Kbps Amount of data transferred no need to access HLR for every GPRS packet Continuous flow of data in both direction

Flow of data

Data transmission bursty

Circuit Switched => Type of Connection connection with circuit switched networks typically one call per hour, average call 2 minutes

Packet - Switched =>connection with external packet data networks and can last for several hours

What is GPRS ?
General Packet Radio Service (GPRS) is a new bearer service for GSM that greatly improves and simplifies wireless access to packet data networks GPRS applies packet radio principal to transfer user data packets in an efficient way b/w MS & external packet data network

GSM network architecture

Base Station Controller (BSC): It controls a group of BTSs and manages their radio ressources. A BSC is principally in charge of handoffs, frequency hopping, exchange functions and power control over each managed BTSs. Base Transceiver Station (BTS) : it maps to transceivers and antennas used in each cell of the network. It is usually placed in the center of a cell. Its transmitting power defines the size of a cell. Each BTS has between 1-16 transceivers depending on the density of users in the cell. MS consists of : The Subscriber Identity Module (SIM) and Mobile equipment/terminal. Network and switching subsystem (NSS) : Its main role is to manage the communications between the mobile users and other users, such as mobile users, ISDN users, fixed telephony users, etc. It also includes data bases needed in order to store information about the subscribers and to manage their mobility. The different components of the NSS: MSC, HLR,VLR, AuC, EIR.
MSC: the central component of the NSS. The MSC performs the switching functions of the network. It also provides connection to other networks.

Benefits of GPRS
New Data Services High Speed (Data Rate 14.4 115 kbps) Efficient use of radio bandwidth (Statistical Multiplexing) Circuit switching & Packet Switching can be used in parallel Constant connectivity Billing based on volume of data transferred Utilizes existing GSM authentication and privacy procedures.

High Data Rate

GPRS uses radio channel i.e. 200 kHz wide Radio channel carries digital data stream of 271 kbps This rate is divided into 8 time slots each carrying 34 kbps per time slot Data rate 14 kbps per time slot achieved after corrections GPRS can combine upto 8 time slots giving data rate of 114 kbps

GPRS Network Elements

GPRS Architecture same as GSM except few hardware modifications GPRS includes GSNs SGSN : Serving GPRS Support Node GGSN : Gateway GPRS Support Node GPRS Register

GPRS Network Architecture

BSC BTS MSC PSTN BTS

Serving GSN GSM/GPRS Access Network BSC BTS Internet BTS Gateway GSN

SGSN Serving GPRS Support Node

Delivers data packets to mobile stations & vice-versa Detect and Register new GPRS MS in its serving area Packet Routing, Transfer & Mobility Management Authentication, Maintaining user profiles Its location register stores location info. & user profiles

GGSN Gateway GPRS Support Node

Interfaces GPRS backbone network & external packet data networks Converts the GPRS packets from SGSN to the PDP format Converts PDP addresses change to GSM addresses of the destination user Stores the current SGSN address and profile of the user in its

location register
Performs authentication Many-to- many relations among SGSNs & GGSNs

GPRS Register
GPRS Register is integrated with GSM-HLR. Maintains the GPRS subscriber data and Routing information. Stores current SGSN address

MS and SGSN Signaling messages protocol stack

GMM\SM LLC
RLC MAC GSM RF RLC MAC GSM RF LLC BSSGP
Frame Relay

GMM\SM LLC
BSSGP
Frame Relay

L1bis

L1bis

MS

Um

BSS (PCU)

Gb

SGSN

BSSGP-Base station system GPRS protocol

User Data Protocol Stack

Application

IP / X.25 SNDCP LLC RLC MAC GSM RF RLC MAC GSM RF SNDCP GTP UDP/ TCP IP L2 L1

IP / X.25 GTP UDP/ TCP IP L2 L1

LLC
BSSGP
Frame Relay

LLC BSSGP
Frame Relay

L1bis

L1bis

MS

Um

BSS (PCU)

Gb

SGSN

Gn

GGSN

Gi

SNDCP - Sub Network Dependent Convergence Protocol

Used to transfer data packets (TCP/IP) between SGSN and MS. Converting and segmenting external network formats (N-PDUs) into subnetwork formats (SN-PDUs). In the opposite direction, SNDCP layer receives SN-PDUs from LLC and converts them back into network data packets. Managing multiple PDP context sessions ensuring that N-PDUs from each PDP context are txed to LLC layer in sufficient time to maintain QOS for each PDP context. Compression and decompression of user data and header information Negotiating the compression parameters to be used between MS and network.

GPRS/UMTS Logical Architecture

Gr or Gc
GTP-MAP protocol converting GSN

HLR

Gn TE MT BSS Gb Iu TE MT UTRAN SGSN Gn Gp Iu TE MT UTRAN SGSN Other PLMN SGSN Gn Gn GGSN Gi PDN TE Gc

Signalling Interface Signalling and Data Transfer Interface

User Plane for GPRS/UMTS

Application IP / X.25
Relay

IP / X.25 SNDCP LLC

Relay

SNDCP LLC RLC MAC GSM RF Um RLC MAC GSM RF BSSGP Network Service L1bis Gb

GTP-U UDP / TCP IP L2 L1 Gn

GTP-U UDP / TCP IP L2 L1 Gi

BSSGP Network Service L1bis

MS
Application

BSS

SGSN

GGSN

IP, PPP, OSP Relay PDCP RLC MAC L1

Uu

IP, PPP, OSP Relay GTP-U UDP/IP AAL5 ATM

Iu-PS

PDCP RLC MAC L1

GTP-U UDP/IP AAL5 ATM

GTP-U UDP/IP L2 L1
Gn

GTP-U UDP/IP L2 L1
Gi

MS

UTRAN

3G-SGSN

3G-GGSN

GPRS Higher Layer Signalling Overview

Application Layer SM Layer Set up data calls, negotiates QoS

GMM- Registration, authentication, attach, location management

LLC Provides Highly reliable data link
AM radio link UM radio link

RLC- MAC

PHY

GPRS Identities
IMSI => International Mobile Subscriber Identity-is the identity number of the SIM. MS send to NW during attach. (not more than 15 digits) 3 digits 2-3 digits
MCC MNC MSIN

P-TMSI => Packet Temporary Mobile Subscriber Identity P-TMSI is sent during GMM attach , if the network does not recognize the P-TMSI (incase of roaming) , it will ask MS to send IMSI for authentication purposes. SGSN selects a P-TMSI from a store of random numbers and sent to MS in ciphered mode which uses P-TMSI to generate TLLI. PDP (Packet Data Protocol) addresses => MS is identified with IMSI. IMSI will have related PDP addresses for the services subscribed to. These addresses can be temporary or permanent and must confirm to the standards of external networks.
MCC- mobile country code , MNC- PLMN network code , MSIN- mobile subscriber identity code

GTP
GTP specifies a tunnel control and management protocol which allows the SGSN to provide GPRS network access for an MS. In the transmission plane, GTP uses a tunnelling mechanism to provide a service for carrying user data packets. The choice of path is dependent on whether the user data to be tunnelled requires a reliable link or not.
The GTP protocol is implemented only by SGSNs and GGSNs. No other systems need to be aware of GTP. GPRS MSs are connected to a SGSN without being aware of GTP. It is assumed that there will be a many-to-many relationship between SGSNs and GGSNs. An SGSN may provide service to many GGSNs. A single GGSN may associate with many SGSNs to deliver traffic to a large number of geographically diverse mobile stations.

GTP Overview
GPRS Tunneling Protocol is
The protocol between GPRS Support Nodes Includes both the GTP signaling (GTP-C) & data transfer (GTP-U) procedures Is defined for the Gn interface, i.e. the interface between GSNs within a PLMN & For the Gp interface between GSNs in different PLMNs Allows multi-protocol packets to be tunneled through the UMTS/GPRS backbone

GTP Overview (Cont.)

GTP-C is the signaling plane and specifies a tunnel control and management protocol is used to create, delete modify tunnels. GTP-U is the transmission plan & uses a tunneling mechanism (GTP-U) to provide a service for carrying user data packets Definitions T-PDU Original data packet G-PDU Original data packet (T-PDU) + GTP header

GTP Header
Octets 1 2 3 4 5 6 7 8 9 10 11 12 8 7
Version

5
PT

4
(*)

3
E

2
S

1
PN

Message Type Length (1st Octet) Length (2nd Octet) Tunnel Endpoint Identifier (1st Octet) Tunnel Endpoint Identifier (2nd Octet) Tunnel Endpoint Identifier (3rd Octet) Tunnel Endpoint Identifier (4th Octet) Sequence Number (1st Octet) Sequence Number (2nd Octet) N-PDU number Next Extension Header Type
SGSN specific

GTP Messages
GTP defines a set of messages. These are classified into
Path Management messages Tunnel Management messages Location Management messages Mobility Management messages

Call set up and tear down

Create PDP Context req.

Create PDP Context resp.

G-PDU (data transfer)

Delete PDP Context req.

Delete PDP Context resp.

SGSN GGSN

Tunnel Management Messages

Create PDP Context Request Create PDP Context Response
Delete PDP Context Request Delete PDP Context Response Update PDP Context request Update PDP Context Response PDU Notification request PDU Notification response PDU Notification reject request PDU Notification reject response
Used for SGSN handoff DHCP relay of PDP address

Used for n/w initiated PDP context

Access Point Name

An APN identifies a PDN that is configured on and accessible from A GGSN. APN has two parts. APN Network Identifier APN Operator Identifier The APN network identifier must correspond to a fully qualified name in DNS e.g. cisco.com The access Points that are supported by the GGSN are preconfigured on the GGSN. APN is sent in the create PDP context request message to GGSN. APN has several attributes associated with its configuration which specify how the user can access the network at the entry point.

APN Attributes
Some of the attributes are - APN Network Identifier - Access Mode Transparent (no authentication) / Non-transparent - IP address pool - Primary DHCP server - Secondary DHCP server - DHCP gateway address - RADIUS server - Backup RADIUS server - IP address of the next hop for the Gi interface Attributes to get logs - Current allocated IP address count - Current PDP context count

Path Management Messages

Path management messages can be sent between any type of GSNs. Echo Request No elements Echo Response Recovery Version not supported No elements Supported Extension Header Notifications Extension header type list

Echo Request/Response Message

Echo request is send on a path to another GSN to find out if the Peer GSN is alive. The periodicity is implementation dependent but is > 60 secs. The Echo response is sent with the local restart counter of the GSN. The GSN receiving the response would compare the restart counter value to the previous stored value to check if the GSN has restarted. The receiving GSN clears off all the PDP context belonging to the restarted GSN. Every GSN maintains its own restart counter in non-volatile memory and its peers restart counters in volatile memory.

Tunnel Management Messages (cont.)

Create PDP Context Request
IMSI(identify a subscriber by the operator. ) Recovery Selection Mode Tunnel End Point Identifies Data 1 Tunnel Endpoint Identifier Control Plan NSAPI Linked NSAPI Conditional Optional Conditional Mandatory Conditional Mandatory Conditional

Charging Characteristics
Trace Reference Trace Type End User Address Access Point Name Protocol Configuration Options SGSN Address for signaling SGSN Address for user traffic MSISDN( for routing call , number to dialin) Quality of service Profile TFT Trigger ID OMC identity Private Extension

Optional
Optional Optional Conditional Conditional Conditional Mandatory Mandatory Conditional Mandatory Conditional Optional Optional Optional

Tunnel Management Messages (cont.)

Create PDP Context response
Information Element Cause Reordering required Recovery Tunnel Endpoint Identifier Data 1 Tunnel Endpoint Id. control Plane Changing ID Presence required Mandatory Conditional Optional Conditional Conditional Conditional

End User Address

Protocol Configuration Options GGSN Address for Control Plane GGSN Address for Use Traffic Quality of Service profile Charging Gateway Address Private Extension

Conditional
Optional Conditional Conditional Conditional Optional Optional

* Private extension contains vendor or operator specific info

Tunnel Management Messages (cont.)

Cause: Indicates if the PDP context was created. Some of the values are - Request accepted - No resource available - All dynamic PDP addresses are occupied - No memory available - Missing or unknown APN etc. If the PDP context request fails the SGSN tries to create the PDP context with the next GGSN in its GGSN list.

Tunnel Management Messages(cont)

Error Indication msg.
Information Element
Tunnel Endpoint Identifier data GSN Address Private extension

Presence
Mandatory Mandatory Optional

Sent from GSN if no active PDP context exists for the received G-PDU. When an error indication is received, the receiving GSN deletes the corresponding PDP context. The elements TEID and GSN address are derived from the data message and uniquely specify the PDP context.

Location Management Messages

Used for network initiated PDP context request when there is no SS7 MAP interface at the GGSN

GTP-MAP Interworking
MAP GTP GTP UDP IP L2 L1 Gn+ UDP IP L2 L1 MAP TCAP SCCP MTP3 MTP2 L1 Gc TCAP SCCP MTP3 MTP2 L1

GGSN

SGSN

HLR

Location Management Messages (cont)

Send Routing Information for GPRS Request Send Routing Information for GPRS Response Failure Report Request Failure Report Response

Note MS GPRS Present Request Note MS GPRS Present Response

Mobility Management Messages:

Sent between SGSNs at the GPRS attach and Inter SGSN routing update procedures.

Reliable Delivery of Signaling Messages

Each path maintains a queue with Signaling msg. to be sent A request (with a response) shall be sent with a sequence number and shall be held in a path list till the response comes. Each path has its own list The sequence number is unique for each outstanding req. msg. T3-Response timer Max time a requesting entity would wait before retransmission N3-Requests times Max number of retransmissions allowed. these two are configurable parameters on the stack.

Handling of Sequence Number (optional)

For GTP-C Used in request-response type of signaling messages as transaction Identity. In the response message the seq. no. of request message is copied.

For GTP-U An increasing number of T-PDUs are transmitted via GTP-U tunnel when transmission order must be preserved. The receiving GGSN would reorder the incoming T-PDUs in seq. if the reordering required flag in the PDP context is set. In this case if required the GGSN would maintain a window and a timers to make sure that a G-PDU was lost. The sequence number is kept unchanged irrespective of the tunnels it travels before the destination.

 SM Layer is sandwiched between Network Layer and GMM layer. It provides service by establishing a PDP context when asked to do so by network layer

Session Management

To set up session for transfer of SN-PDUs and to de-activate the session when instructed
To modify QOS and Radio priority given to a PDP context when the network instructs it to do so. It relies upon the services provided by GMM layer and will check that it is GPRS attached and then send PDP context activation request asking the GMM layer to deliver it to SGSN SM layer. MS will receive from the network PDP context activation accept (or reject!) . This is the information SNDCP is waiting for and now accepts the N-PDUs from application layer.

PDP context activation is a data call set-up for GPRS operations. Unlike circuit switched call where set-up is removed when call is completed but PDP context activations remains valid when the call or session which caused the Context is completed. For each session PDP context following parameters are exchanged :
PDP type NSAPI APN Access Point Name MS may use this to specify which external network it wishes to access Requested PDP address- may be X.121, IPv4 or IPv6 address QOS Radio priority Protocol configuration Options

Cont.

PDP Context Activation

PDP Context Deactivation

Initiated by : Network- if PDP context is not used for some time Mobile- QOS not accepted or Insufficient resources

GMM - GPRS Mobility Management

Attaching to the GPRS network when requested by SM or application layer. This attach process alerts the network to MS presence and allows network to authenticate it and give information required for encryption. Perform Routing area updates Perform cell updates when MS is in ready state and reselects a cell Detaching from the network Authentication

GMM states
Idle
MS is not attached to GPRS Standby Subscriber is attached to GPRS mobility management MS performs RA and cell selection locally, reports RA changes Data, signaling or page response move the MS to READY Detach procedures moves the state to Idle Ready Information on cell selection is reported Cell selection may be done locally or by network control State supervised by a timer

 GMM is requested by SM layer to attach. Then GMM sends Attach Request (PTMSI, RAI,TLLI, cksn, QOS, Cause, Radio priority) down to LLC layer. From the PTMSI and cksn , the network operator will have a decision making process to authenticate MS or to go immediately in encryption mode, by passing authentication. MS receives Authentication and Encryption command from network, it extracts RAND, passes it to SIM card which produces SRES, and encryption key Kc . GMM layer puts SRES into Authentication and Encryption response and passes this Kc key to LLC for encryption procedures. When GMM layer received Attach Accept (Ra update timer, RAi, PTMSi, PMTSI sig, new TLLI ), the authentication process is completed. The GMM accepts the PTMSI and other information and send an Attach complete message to the network. RAND-Random number related to IMSI in the SGSN. SRES-signed response

Flow for GPRS attach procedure

Routing Area Update

RAU is performed when MS is GPRS attached and RLC indicates a change in routing area. The RA reported to GMM layer is continously compared to RA stored in SIM card. When these differ an RA update to GPRS network is initiated by GMM layer. GSM Location Area(LA) is divided into several Routing Areas(RA) RA consists of several cells SGSN is informed when MS moves to a new RA MS sends a Routing Area Update Request to its assigned SGSN

Routing Area Update contd.

Whenever an MS moves to a new RA, it sends a routing area update request to its assigned SGSN. The message contains the routing area identity (RAI) of its old RA. The base station subsystem (BSS) adds the cell identifier (CI) of the new cell, from which the SGSN can derive the new RAI. Two different scenarios are possible: Intra-SGSN routing area update: The MS has moved to an RA that is assigned to the same SGSN as the old RA. In this case, the SGSN has already stored the necessary user profile and can assign a new packet temporary mobile subscriber identity (P-TMSI) to the user (routing area update accept). Since the routing context does not change, there is no need to inform other network elements, such as GGSN or HLR. Inter-SGSN routing area update: The new RA is administered by a different SGSN than the old RA. The new SGSN realizes that the MS has changed to its area and requests the old SGSN to send the PDP contexts of the user. Afterward, the new SGSN informs the involved GGSNs about the users new routing context. In addition, the HLR and (i f needed) the MSC/VLR are informed about the users new SGSN.

Routing Area Update

Applications of GPRS
Web browsing Corporate & Internet Email Vehicle Positioning Remote LAN Access Home Automation Document Sharing/Collaborative working Virtual private network (VPN):
With VPN, companies will be able to let their remote workers wirelessly access to corporate resources and stay in touch with their work teams.

 ADDITIONAL SLIDES

Data Link layer

Divided into two sub layers :

LLC layer (between MS-SGSN) RLC/MAC (between MS-BSS)

LLC-Logical Link Control

Establishes highly reliable logical link between MS & its assigned SGSN using TLLI as the mobile station address. Works either in connection mode (acknowledged) which is high reliability link or connectionless mode (unacknowledged) for high delivery of SN-PDUs .

Data confidentiality is ensured by ciphering and deciphering functions

RLC/MAC Layer
Radio Link Control(RLC) Establish a reliable link between MS & BSS Segmentation and reassembly of LLC frames into RLC data blocks To allow ordered transfer of LLC PDUs between MAC and LLC. Medium Access Control(MAC) To allow shared use of radio medium (physical channels) between multiple mobile stations or incase of a single MS between different PDP contexts. Allow contention resolution To allow queuing and scheduling for MS terminating calls. To control TBF for carrying data packets

Physical Layer
Divided into two sub layers :

Physical Link Layer (PLL) Physical RF Layer (RFL) Channel coding, interleaving, detection of physical link congestion, neighboring cell measurements, Handovers (Cell change orders), Measurement Reports, Cell reselection.

PLL Provides a physical channel between MS and BSS

RFL - Operates below PLL